<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-07T18:26:36.248510+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b21450ba-5ae2-47c8-b872-5c08479fdccf/export</id>
    <title>b21450ba-5ae2-47c8-b872-5c08479fdccf</title>
    <updated>2026-05-07T18:26:36.584503+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b21450ba-5ae2-47c8-b872-5c08479fdccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2621", "type": "seen", "source": "https://t.me/ctinow/211110", "content": "https://ift.tt/o9eDTOr\nCVE-2024-2621", "creation_timestamp": "2024-03-19T02:26:27.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b21450ba-5ae2-47c8-b872-5c08479fdccf/export"/>
    <published>2024-03-19T02:26:27+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/57f8a34a-1a44-409b-bbaf-8d44d87299c0/export</id>
    <title>57f8a34a-1a44-409b-bbaf-8d44d87299c0</title>
    <updated>2026-05-07T18:26:36.584419+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "57f8a34a-1a44-409b-bbaf-8d44d87299c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2621", "type": "seen", "source": "https://t.me/ctinow/211116", "content": "https://ift.tt/o9eDTOr\nCVE-2024-2621", "creation_timestamp": "2024-03-19T02:26:36.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/57f8a34a-1a44-409b-bbaf-8d44d87299c0/export"/>
    <published>2024-03-19T02:26:36+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c5bf64a9-919a-4649-a823-0425e08c9e89/export</id>
    <title>c5bf64a9-919a-4649-a823-0425e08c9e89</title>
    <updated>2026-05-07T18:26:36.584336+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c5bf64a9-919a-4649-a823-0425e08c9e89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26219", "type": "seen", "source": "https://t.me/arpsyndicate/4474", "content": "#ExploitObserverAlert\n\nCVE-2024-26219\n\nDESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2024-26219. HTTP.sys Denial of Service Vulnerability\n\nFIRST-EPSS: 0.000430000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2024-04-11T08:00:27.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c5bf64a9-919a-4649-a823-0425e08c9e89/export"/>
    <published>2024-04-11T08:00:27+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2e3f0f29-65cf-4a4d-94b6-82096213c3d7/export</id>
    <title>2e3f0f29-65cf-4a4d-94b6-82096213c3d7</title>
    <updated>2026-05-07T18:26:36.584249+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2e3f0f29-65cf-4a4d-94b6-82096213c3d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26218", "type": "seen", "source": "https://t.me/arpsyndicate/4495", "content": "#ExploitObserverAlert\n\nCVE-2024-26218\n\nDESCRIPTION: Exploit Observer has 3 entries in 2 file formats related to CVE-2024-26218. Windows Kernel Elevation of Privilege Vulnerability\n\nFIRST-EPSS: 0.000430000\nNVD-IS: 5.9\nNVD-ES: 1.8", "creation_timestamp": "2024-04-11T09:44:18.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2e3f0f29-65cf-4a4d-94b6-82096213c3d7/export"/>
    <published>2024-04-11T09:44:18+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4bcf3e0e-fca7-49e1-a4b3-63de789af8aa/export</id>
    <title>4bcf3e0e-fca7-49e1-a4b3-63de789af8aa</title>
    <updated>2026-05-07T18:26:36.584139+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4bcf3e0e-fca7-49e1-a4b3-63de789af8aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26213", "type": "seen", "source": "https://t.me/arpsyndicate/4497", "content": "#ExploitObserverAlert\n\nCVE-2024-26213\n\nDESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2024-26213. Microsoft Brokering File System Elevation of Privilege Vulnerability\n\nFIRST-EPSS: 0.000430000\nNVD-IS: 5.9\nNVD-ES: 1.0", "creation_timestamp": "2024-04-11T09:54:08.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4bcf3e0e-fca7-49e1-a4b3-63de789af8aa/export"/>
    <published>2024-04-11T09:54:08+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/54ce0f1b-9d34-4f7c-bf71-fb627577b61e/export</id>
    <title>54ce0f1b-9d34-4f7c-bf71-fb627577b61e</title>
    <updated>2026-05-07T18:26:36.584049+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "54ce0f1b-9d34-4f7c-bf71-fb627577b61e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26218", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2024", "content": "\u0414\u043e\u0431\u0440\u043e\u0433\u043e \u0443\u0442\u0440\u0430\nCVE-2024-26218 Windows Kernel Elevation of Privilege Vulnerability\n*\nProof-of-Concept\n\n#win #lpe", "creation_timestamp": "2024-04-27T06:38:23.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/54ce0f1b-9d34-4f7c-bf71-fb627577b61e/export"/>
    <published>2024-04-27T06:38:23+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3587466e-db31-4576-a585-84e1398d45d2/export</id>
    <title>3587466e-db31-4576-a585-84e1398d45d2</title>
    <updated>2026-05-07T18:26:36.583952+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3587466e-db31-4576-a585-84e1398d45d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26218", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/116", "content": "\ud83d\udea8EXPLOIT POC\ud83d\udea8PoC Exploit Released For Windows Kernel EoP Vulnerability.\n\n#Clearnet #DarkWebInformer #DarkWeb #Exploit #Cyberattack #Cybercrime #Windows #Infosec #CTI #CVE202426218 #Vulnerability\n\nOne of the vulnerabilities addressed was CVE-2024-26218, associated with the Windows Kernel Privilege Escalation vulnerability, which had a severity of 7.8 (High).\n\nhttps://github.com/exploits-forsale/CVE-2024-26218\n\nX Link: https://twitter.com/DarkWebInformer/status/1784930649805029824", "creation_timestamp": "2024-04-29T15:04:41.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3587466e-db31-4576-a585-84e1398d45d2/export"/>
    <published>2024-04-29T15:04:41+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/dccbffb4-9354-4455-8f12-a816ed27945b/export</id>
    <title>dccbffb4-9354-4455-8f12-a816ed27945b</title>
    <updated>2026-05-07T18:26:36.583809+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "dccbffb4-9354-4455-8f12-a816ed27945b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26218", "type": "published-proof-of-concept", "source": "https://t.me/Teamx1945x/5565", "content": "#exploit\n1. Telegram Web app XSS/Session Hijacking 1-click\nhttps://seclists.org/oss-sec/2024/q2/183\n\n2. CVE-2019-2703:\nVirtualBox VM Escape\nhttps://j0nathanj.github.io/Dusting-off-the-VM-Escape\n\n3. CVE-2024-26218:\nWindows PspBuildCreateProcessContext Double-Fetch / Buffer Overflow\nhttps://packetstormsecurity.com/files/178377/Windows-PspBuildCreateProcessContext-Double-Fetch-Buffer-Overflow.html", "creation_timestamp": "2024-05-01T13:09:31.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/dccbffb4-9354-4455-8f12-a816ed27945b/export"/>
    <published>2024-05-01T13:09:31+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f271a9a1-f96f-41b6-b5ad-09b83bc74f40/export</id>
    <title>f271a9a1-f96f-41b6-b5ad-09b83bc74f40</title>
    <updated>2026-05-07T18:26:36.577874+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f271a9a1-f96f-41b6-b5ad-09b83bc74f40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-26218", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10428", "content": "#exploit\n1. Telegram Web app XSS/Session Hijacking 1-click\nhttps://seclists.org/oss-sec/2024/q2/183\n\n2. CVE-2019-2703:\nVirtualBox VM Escape\nhttps://j0nathanj.github.io/Dusting-off-the-VM-Escape\n\n3. CVE-2024-26218:\nWindows PspBuildCreateProcessContext Double-Fetch / Buffer Overflow\nhttps://packetstormsecurity.com/files/178377/Windows-PspBuildCreateProcessContext-Double-Fetch-Buffer-Overflow.html", "creation_timestamp": "2024-05-01T23:39:10.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f271a9a1-f96f-41b6-b5ad-09b83bc74f40/export"/>
    <published>2024-05-01T23:39:10+00:00</published>
  </entry>
</feed>
